Skip to main content
Glama

MaxMind minFraud MCP by usefulapi

minFraud risk score

minfraud_score
Read-only

Score a transaction for fraud risk. Returns the overall risk_score (0.01–99), IP risk, disposition, and remaining query funds — the lightest, cheapest assessment. Send at least device.ip_address (plus email/billing/order for a better score). API: POST /minfraud/v2.0/score.

Input Schema

NameRequiredDescriptionDefault
emailNo
eventNo
orderNo
deviceNoInfo about the device/connection. device.ip_address is the most important input.
accountNo
billingNo
paymentNo
shippingNo
credit_cardNo
custom_inputsNoCustom inputs configured in your minFraud account.
shopping_cartNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed3 schema fields changed
    • changedInput schema / $schema
      Previous value: -"http://json-schema.org/draft-07/schema#"New value: +"https://json-schema.org/draft/2020-12/schema"
    • removedInput schema / properties / custom_inputs / additionalProperties / anyOf
      Removed value: -[
      -  {
      -    "type": "string"
      -  },
      -  {
      -    "type": "number"
      -  },
      -  {
      -    "type": "boolean"
      -  }
      -]
    • addedInput schema / properties / custom_inputs / additionalProperties / type
      Added value: +[
      +  "string",
      +  "number",
      +  "boolean"
      +]
  2. First observed

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The readOnlyHint annotation already establishes that this is a safe read operation, so the description's job is to add context beyond that. It does: it discloses the main return fields (risk_score range, IP risk, disposition, remaining query funds), notes the cost tier, and supplies the POST endpoint, though it omits interpretation guidance for disposition values.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three tightly packed sentences: purpose, return values, minimal input guidance, and API endpoint. Nothing is wasted and the most important information is front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no output schema, low schema description coverage, and nested objects, the description supplies the essential framing: what it returns, what to send at minimum, and that it is the cheapest tier. It is reasonably complete for an agent to call it correctly, though disposition interpretation and deeper nested parameter meaning remain absent.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is only 18%, so the description must compensate. It does add priority guidance by naming device.ip_address and the email/billing/order objects, but with 11 top-level parameters it leaves most object groups unexplained, so the compensation is partial rather than complete.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: 'Score a transaction for fraud risk.' The phrase 'the lightest, cheapest assessment' implicitly distinguishes it from the heavier minFraud siblings, but it does not name an alternative tool the way a top-tier definition would.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Implies usage by calling itself the 'lightest, cheapest assessment' and recommends sending at least device.ip_address. However, it never states when to choose this over minfraud_factors or minfraud_insights, nor any when-not-to-use condition.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.